An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
An attacker can send a specially crafted byte sequence (\xB0\x00\x3C) to the vulnerable system, which is not properly validated by the application. Improper deserialization of input data combined with lack of buffer memory boundary control (CWE-119) leads to its overflow or corruption of the application's internal state. The attack vector is the network, requires no authentication or user interaction, which significantly lowers the threshold for its exploitation.
An attacker can cause permanent service unavailability (DoS) or — in the worst scenario — achieve remote execution of arbitrary code (RCE) on the server or client workstation with IDOL2 process privileges, which may result in complete system compromise.
Patches available from the vendor should be applied according to references. It is recommended to monitor the vendor's website (uci.de) for an updated IDOL2 client version and restrict network access to the service only to trusted hosts until the patch is deployed.
UCI IDOL 2 (also known as uciIDOL or IDOL2) in all versions up to and including 2.12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HUci Idol2
APPUci≤ 2.12
Related vulnerabilities
RCE i DoS w UCI IDOL 2 przez błędną deserializację i przepełnienie bufora
RCE i DoS w UCI IDOL 2 przez improper input validation i deserializację
UCI IDOL 2: brak uwierzytelnienia w komunikacji przez raw socket
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and ser...